Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/edd15e8b-810b-340a-88e6-4a9e429c96b4.roa
File:                     edd15e8b-810b-340a-88e6-4a9e429c96b4.roa (raw, json)
Hash identifier:          wiTWyP0vs0V1/O8EWJCOfjng/q0v5AvBqdE+9ErBH2c=
Subject key identifier:   F2:63:F1:C4:02:86:3F:2A:DC:F9:1F:02:81:76:56:37:7B:A0:29:7A
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F43285847F9B4E1DF312ADBD8677A6180
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/edd15e8b-810b-340a-88e6-4a9e429c96b4.roa
Signing time:             Sat 23 Nov 2024 14:00:39 +0000
ROA not before:           Sat 23 Nov 2024 14:00:39 +0000
ROA not after:            Fri 21 Feb 2025 14:00:39 +0000
asID:                     401009
IP address blocks:        2602:f919:900::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f9:b4:e1:df:31:2a:db:d8:67:7a:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Nov 23 14:00:39 2024 GMT
            Not After : Feb 21 14:00:39 2025 GMT
        Subject: CN=430fcfcf-0acc-4de9-a764-129e359bcc88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e6:a2:75:73:4f:79:75:fc:e5:27:5e:09:33:
                    ac:fd:95:65:45:92:a3:a4:12:eb:b4:33:a2:ea:0f:
                    fe:a0:68:49:33:02:59:32:b1:61:6e:d5:ac:8a:e0:
                    c8:92:0b:1f:ca:f3:a5:92:df:9d:02:92:ac:07:21:
                    64:41:d8:b6:16:7c:91:ee:19:99:bf:97:9b:2d:04:
                    e9:cb:75:48:43:c4:79:ab:7b:cd:d3:75:89:41:3b:
                    85:fa:c0:8c:6d:00:11:6c:c7:96:bf:e1:0c:1d:5d:
                    e0:98:45:e2:84:e9:98:71:96:9a:cc:76:12:cc:88:
                    6d:ad:25:b2:b6:6e:e4:7e:8e:be:8c:92:6c:a5:4e:
                    47:24:fd:d6:ef:e3:47:f7:0e:02:47:43:19:bc:cf:
                    ff:eb:26:9f:33:d9:be:cb:01:83:d4:7d:e9:af:ed:
                    95:14:08:8e:f1:1a:22:57:c3:90:5c:ff:77:ef:f8:
                    67:5e:76:e9:a7:19:fb:0d:5f:89:31:aa:fa:e7:96:
                    60:55:40:43:3d:ad:77:c1:39:7c:49:c0:1f:23:1d:
                    0e:86:41:80:14:c8:44:4b:71:78:58:08:c3:0d:82:
                    ff:56:83:d9:30:3f:86:18:62:0e:ab:2a:cd:a2:a7:
                    2a:2c:de:d7:e9:0d:19:32:f2:ad:ae:21:a7:01:99:
                    c7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:63:F1:C4:02:86:3F:2A:DC:F9:1F:02:81:76:56:37:7B:A0:29:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/edd15e8b-810b-340a-88e6-4a9e429c96b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:1a:18:c3:8c:84:9b:b0:a1:ca:56:19:6f:5a:ec:76:b1:fe:
         0a:0e:a8:9a:44:18:f7:02:ba:04:c4:dd:14:da:04:7f:e8:e6:
         d7:67:bf:6d:23:a7:3b:5a:94:8f:87:40:ba:5b:c5:d1:c1:97:
         37:27:36:6c:96:bc:d0:76:fa:43:e9:49:38:20:46:a0:5d:16:
         e0:bb:e9:01:7d:83:71:3e:d0:23:e6:c2:5d:28:e4:9a:dc:23:
         6c:69:69:d7:61:1d:0e:e9:04:e1:6b:d7:2e:8e:b5:dc:7b:f0:
         2a:d4:b2:49:cd:a6:ca:3b:d0:ce:8f:25:3e:3c:c6:48:03:2a:
         00:a8:fb:a2:3d:86:4d:a2:2e:f6:60:dd:61:d1:25:02:be:11:
         89:98:d2:96:30:0a:5f:63:38:f5:f9:6e:cb:6a:c7:56:51:07:
         3b:48:16:fd:ef:f5:35:b5:7e:82:7c:2a:42:4b:a5:ce:71:64:
         c8:c9:4e:1c:80:1a:ef:f6:45:60:4d:54:c5:c7:0e:f0:68:f0:
         d6:15:4b:41:51:9e:6a:fd:2e:e3:d5:84:67:fd:d5:5c:5f:d9:
         cc:9d:de:e0:16:79:88:8d:00:9e:8e:48:5d:df:54:82:1f:54:
         5a:82:f5:72:99:47:8f:cb:e8:13:67:03:53:b9:62:69:86:4b:
         0d:24:05:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:40 2024 by rpki-client on console-fra.rpki-client.org